# Identity Abstraction Ownership

## Ownership Rule

- Identity-specific abstractions are owned by `thalos-service`.
- `Thalos.Service.Identity.Abstractions` is the canonical abstraction package.
- Blueprint and non-Thalos repositories must not own identity abstractions.

## Guardrails

- Identity token and authorization contracts remain in Thalos scope.
- Cross-repo consumers reference abstractions, not Thalos internals.